nvm
nvm 0.40.8 Blocks Malicious .nvmrc Path Traversal
09/20/2026
A malicious repository-controlled .nvmrc can make vulnerable nvm read outside its alias directory and disclose local files. Update the active nvm installation and review developer, CI and shell-hook workflows that process untrusted repositories.
